Policy Statement
Concise description of purpose, scope, who is covered, and when the policy applies, including any workplace testing or vaccination requirements.
A clear policy and waiver reduce legal uncertainty, support consistent health practices, and create an auditable record for compliance and risk management while protecting employee privacy under applicable laws.
The document is completed by HR, occupational health staff, or frontline managers and signed by the affected employee before the policy is enforced.
Keep distribution records and signed copies centralized for audit, accommodation processes, and any future claims or regulatory review.
An HR Manager typically issues the policy, documents employee acknowledgement, handles accommodation requests, and retains signed copies per company retention schedules and legal requirements.
An Occupational Health Director reviews medical-related responses, determines fitness-for-duty questions, oversees confidentiality controls, and documents clinical basis for any work restrictions.
Concise description of purpose, scope, who is covered, and when the policy applies, including any workplace testing or vaccination requirements.
Specify what medical information is requested, why it is needed, and how it will be used and protected by the employer.
Clear language that records employee acknowledgement and any limited waiver, avoiding overbroad releases of employer negligence.
Procedure for requesting ADA or other medical accommodations, contact point, and timelines for employer response.
Privacy measures, retention period, and whether a BAA applies when PHI is handled by third-party processors.
Designated signature, printed name, title (if applicable), and date; include witness or notarization fields only where legally required.
| Field | Configuration |
|---|---|
| Signature Type | eSignature (ESIGN/UETA compliant) |
| Authentication | Email link plus optional SMS code |
| Storage | Encrypted storage with versioning |
| Audit Trail | Capture IP, timestamp, and action log |
Choose a platform that supports secure storage, audit trails, and integrations with HRIS or EHR systems where necessary.
Ensure integration choices preserve PHI protections (BAA where required) and that exported signed records remain tamper-evident and accessible for audits and legal holds.
Provide the policy before duties begin when it affects working conditions.
Reissue or confirm acknowledgement at least annually for ongoing programs.
Follow OSHA and company timelines for reporting work-related incidents.
Retain PHI per 45 CFR §164.530(j) when applicable.
Notify employees promptly of material changes to health policies.
Prepare policy text and waiver language tailored to your operations.
Obtain counsel and occupational health review before release.
Deliver and collect signed acknowledgements with proof of receipt.
Store signed records securely and ensure retrieval for audits.
| signNow | DocuSign | Adobe Sign | PandaDoc | HelloSign | |
|---|---|---|---|---|---|
| Starting Price | $8/user/mo | $15/user/mo | $14/user/mo | $19/user/mo | $15/user/mo |
| Free Trial | 7-day free trial, no credit card required | Varies by plan | Varies by plan | Varies by plan | Varies by plan |
| Bulk Send | Yes | Yes | Yes | Yes | No |
| Audit Trail | Yes | Yes | Yes | Yes | Yes |
| HIPAA Compliant | Yes | Yes | Yes | No | No |
| Envelope Cap | No cap | 100 envelopes/user/year | Varies by plan | Varies by plan | Varies by plan |
A small investment firm standardized a health acknowledgement for all contractors
A clinical services provider required consent for limited health screenings and data sharing